ZenHive records
4 published records for vendor zenhive.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-294 Authentication Bypass by Capture-replay2
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition1
- CWE-770 Allocation of Resources Without Limits or Throttling1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-2026-67581No exploit | On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replayzenhive · machine payments protocol · CWE-294 | High8.7 | — | 0.5% | Aug 19, 2026 |
33Monitor | CVE-2026-73541No exploit | Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drainzenhive · machine payments protocol · CWE-770 | High8.3 | — | 0.5% | Aug 19, 2026 |
32Monitor | CVE-2026-73136No exploit | Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replayzenhive · machine payments protocol · CWE-294 | High8.2 | — | 0.5% | Aug 19, 2026 |
25Monitor | CVE-2026-73829No exploit | Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent racezenhive · machine payments protocol · CWE-367 | Medium6.3 | — | 0.3% | Aug 19, 2026 |
- CVE-2026-6758134Monitor
On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay
HighCVSS 8.7No exploitEPSS 0%zenhive · machine payments protocolAug 19, 2026
- CVE-2026-7354133Monitor
Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain
HighCVSS 8.3No exploitEPSS 0%zenhive · machine payments protocolAug 19, 2026
- CVE-2026-7313632Monitor
Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay
HighCVSS 8.2No exploitEPSS 0%zenhive · machine payments protocolAug 19, 2026
- CVE-2026-7382925Monitor
Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent race
MediumCVSS 6.3No exploitEPSS 0%zenhive · machine payments protocolAug 19, 2026